PRISMA-2023-0056 Reported from Twistlock

Hello, we ran a twistlock scan and got this finding:

CVE: PRISMA-2023-0056
Image: hashicorp/consul:1.17.2
Description: The github.com/sirupsen/logrus module of all versions is vulnerable to denial of service. Logging more than 64kb of data in a single entry without newlines causes the log writer function to hang indefinitely.
Distro: alpine-3.18.5
Package: github.com/sirupsen/logrus v1.9.0
Package Path: /bin/consul
Info: https://github.com/sirupsen/logrus/issues/1370

I think its coming from here: https://github.com/hashicorp/consul/blob/main/go.mod#L250

Are there plans to bump this dependency?

Start with go.mod around the dependency mentioned near line 250 and compare the pinned github.com/sirupsen/logrus version with the PRISMA-2023-0056 advisory and upstream issue. Done means the vulnerable dependency is addressed and the reported Consul image no longer produces this finding in a Twistlock scan.

Written by the indexing model from the issue text.